$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft File: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft (raw, json) Hash identifier: 9fphQmDkS4ZKggKGRTxOiUXzhKYzvdtaw1PWiW+nNQA= Subject key identifier: 57:3D:8D:A3:C3:27:66:40:4F:70:9B:B9:39:C1:66:C9:FF:6F:48:27 Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Certificate serial: 019677560DFA1CCD8922C54645DBDFD07F53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft Manifest number: 123A Signing time: Sun 27 Apr 2025 13:00:50 +0000 Manifest this update: Sun 27 Apr 2025 13:00:50 +0000 Manifest next update: Mon 28 Apr 2025 13:00:50 +0000 Files and hashes: 1: 0T4kYsm4csSjL8VboPiv6-n-j0A.roa (hash: aDj2+cGm+6rFRblQlBX3W4oDpuhRvKm1wzGVwZCxKxo=) 2: 0kdqhMgoXMqa2bGg6WCouazRWoA.roa (hash: m8tqnKE1kxATVgNxV4xo3K5SETCSivJyawzzyZu0T8M=) 3: Bdn1DcMJLsTBh2Q12ScTlfextfA.roa (hash: 5aLKJErELEuvOisnhFo7YC5MNb/X65d9eCU26oCY0QQ=) 4: CwkL85UqoIRe6_M2Y8-_-N4dRZg.roa (hash: IuDgpmoqQyZe/QgfNMc3PyivvmiOvLYcwJyNp9apwNQ=) 5: Ka0pjuU2eliSF6kAA4oHaZoEvsA.roa (hash: 62kAAv2Hh6q7YMgpvoYSR/SU5a88o0FYbuA/sB0zQYU=) 6: MgxF_7heYMD80wktONtKXy_JUjw.roa (hash: VSasJsU9l5n4BfJqqcCZXt2bux9xLXSz0Hlw9ESwmwY=) 7: P-3m5q4qPQ2SNeiAs_GOekqcfjs.roa (hash: eKfLN+GcqqNwEJXEtNi5qdZ/kBOqEtfUu7tt1fh/R9c=) 8: VkosI65EihkcngTWaTJkG6-9m2I.roa (hash: fX35nzHhBNIcEWDRVnVwrt3ML71QDkHBtpojCYaD+w8=) 9: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl (hash: sCS9N/BCiEx6ZtCzJ7GgnqFsqk/Dtuz9uU1q2LXDga0=) 10: m04fb-jUHyOTXhh_z_q3Hd-LAMY.roa (hash: bXlmxzbFdTP+0jnQtSP1HnYWBUd9rItj9AvW7vkRDls=) 11: pgAR_DhucAVso-7iUGVc2v72k-k.roa (hash: 9hxBN+TWA9N4uVVJ3lzI0bLTHIAllmoH+jSnFMWRgCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:77:56:0d:fa:1c:cd:89:22:c5:46:45:db:df:d0:7f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Validity Not Before: Apr 27 13:00:50 2025 GMT Not After : Apr 28 13:00:50 2025 GMT Subject: CN=573d8da3c32766404f709bb939c166c9ff6f4827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:ad:54:2c:c1:f0:dc:df:a6:14:a0:ab:c4: 0b:eb:27:86:30:e5:61:0a:92:6e:2b:39:de:df:cd: e4:e6:95:82:58:cf:af:e2:ca:9b:ec:c2:38:59:fd: b0:ab:7f:d2:69:5d:44:bf:92:f7:9d:5c:26:1c:dd: c1:31:ff:fa:1b:1c:2d:07:83:6f:54:23:fc:85:8a: b6:1d:76:3c:14:19:1e:12:b3:f9:82:c7:2a:09:5f: e7:0e:36:dc:f6:3b:dc:12:34:f8:60:83:f4:4b:68: 21:27:4e:f7:1b:77:d4:ca:f1:14:39:4d:e2:48:18: 41:c6:3a:34:72:05:4e:97:8c:c7:5d:4f:40:d7:92: a4:a3:dc:3c:a1:c9:d0:a2:8c:61:1a:ca:22:79:eb: 91:f5:03:56:a0:42:ff:09:ed:9a:3d:92:c1:8c:4f: d0:60:90:78:ad:18:0f:96:70:a6:ac:d0:42:23:ab: 61:43:2d:88:d8:ad:c5:31:8a:f8:89:ba:bf:a2:f5: 3a:0f:1f:81:61:a7:ea:26:27:ee:de:c4:5f:77:ec: 35:37:54:d6:62:a2:c7:ff:44:74:69:7e:ec:fd:d2: d5:aa:81:66:1f:04:20:83:8a:5b:e2:2a:97:7a:51: dd:b1:26:88:b8:49:55:a5:be:a1:2e:17:de:1f:8e: c1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3D:8D:A3:C3:27:66:40:4F:70:9B:B9:39:C1:66:C9:FF:6F:48:27 X509v3 Authority Key Identifier: keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2e:01:ac:d3:f0:c7:19:c3:aa:68:85:a3:96:80:e8:27:7c: fa:a2:c4:1e:5b:c1:5b:14:83:d7:10:a6:17:31:78:9b:12:fb: 60:91:d4:95:f8:c0:7d:2f:62:47:fa:76:ca:31:4a:48:04:15: c6:e8:3a:7b:b6:f7:56:3f:85:ac:30:ad:3a:9f:dd:52:38:7c: 1e:1d:32:d5:f1:9f:3b:88:78:f6:3f:e8:4a:8d:a6:09:f7:43: 68:d1:86:2f:10:32:96:33:24:a7:d6:3f:c4:a3:bc:df:7f:62: 63:c3:f0:ef:fb:ce:54:91:3d:46:9b:bf:8d:9e:44:b1:d9:82: c6:6b:04:7f:8c:4c:de:4f:77:84:d7:47:fb:f4:c7:90:a9:e5: 38:c5:95:5f:12:f9:fb:64:1a:27:d1:c0:a1:5c:f7:22:20:12: 38:2f:2c:04:7b:bd:ef:89:a2:45:c0:1e:0d:52:12:34:e9:a7: c9:a0:15:3b:8c:ef:ba:c0:19:5a:35:86:c0:5e:d2:99:c2:ea: da:62:c6:3b:cf:89:99:be:1d:f3:f3:cd:d3:b6:4f:4d:30:1a: 69:93:8b:fe:95:b0:91:10:3d:29:48:85:2b:9f:39:88:15:7c: ef:84:a8:2c:58:b2:17:67:e5:a3:ae:27:12:91:db:2b:c7:ab: 1a:66:10:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ3Vg36HM2JIsVGRdvf0H9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGQ1NDI3ODE4NTFjMGJjZTVhM2VhNWNjMzg3NjUwZmZj ODI3N2UwHhcNMjUwNDI3MTMwMDUwWhcNMjUwNDI4MTMwMDUwWjAzMTEwLwYDVQQD Eyg1NzNkOGRhM2MzMjc2NjQwNGY3MDliYjkzOWMxNjZjOWZmNmY0ODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp06tVCzB8NzfphSgq8QL6yeGMOVh CpJuKzne383k5pWCWM+v4sqb7MI4Wf2wq3/SaV1Ev5L3nVwmHN3BMf/6GxwtB4Nv VCP8hYq2HXY8FBkeErP5gscqCV/nDjbc9jvcEjT4YIP0S2ghJ073G3fUyvEUOU3i SBhBxjo0cgVOl4zHXU9A15Kko9w8ocnQooxhGsoieeuR9QNWoEL/Ce2aPZLBjE/Q YJB4rRgPlnCmrNBCI6thQy2I2K3FMYr4ibq/ovU6Dx+BYafqJifu3sRfd+w1N1TW YqLH/0R0aX7s/dLVqoFmHwQgg4pb4iqXelHdsSaIuElVpb6hLhfeH47B3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFc9jaPDJ2ZAT3CbuTnBZsn/b0gnMB8GA1UdIwQY MBaAFFndVCeBhRwLzlo+pcw4dlD/yCd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYt NDdlMDkzNzk4OWE4LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYtNDdlMDkzNzk4OWE4 LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHi4BrNPw xxnDqmiFo5aA6Cd8+qLEHlvBWxSD1xCmFzF4mxL7YJHUlfjAfS9iR/p2yjFKSAQV xug6e7b3Vj+FrDCtOp/dUjh8Hh0y1fGfO4h49j/oSo2mCfdDaNGGLxAyljMkp9Y/ xKO8339iY8Pw7/vOVJE9Rpu/jZ5EsdmCxmsEf4xM3k93hNdH+/THkKnlOMWVXxL5 +2QaJ9HAoVz3IiASOC8sBHu974miRcAeDVISNOmnyaAVO4zvusAZWjWGwF7SmcLq 2mLGO8+Jmb4d8/PN07ZPTTAaaZOL/pWwkRA9KUiFK585iBV874SoLFiyF2flo64n EpHbK8erGmYQsg== -----END CERTIFICATE-----Generated at Sun Apr 27 15:12:01 2025 by rpki-client